Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 12:33
Behavioral task
behavioral1
Sample
3063ad2028ba82bb3464494077154e98_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3063ad2028ba82bb3464494077154e98_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
3063ad2028ba82bb3464494077154e98_JaffaCakes118.pdf
-
Size
12KB
-
MD5
3063ad2028ba82bb3464494077154e98
-
SHA1
9113478918cb2340bfcde3d3268d78921f66aae7
-
SHA256
23b99429de7d697d19e0f625ecbb1443eae16b9c936dfbafcdbbef26aa031717
-
SHA512
995d387025a8d8bdf458ca75e7dcd1bc92bb1c35804ccc4e720bf7a4cf051b4a7b4b1cb721fea45d9b4cf69324a719381b3e19249407a5c550f62247b9e51389
-
SSDEEP
384:SPe4xLMULIGAXGBGB8fVRyiO92m548kHhJAqG00Szz9e7IkO:S26DHA2B08byp3dAhb90ieY
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1712 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1712 AcroRd32.exe 1712 AcroRd32.exe 1712 AcroRd32.exe 1712 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3063ad2028ba82bb3464494077154e98_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1712
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD555a995d3a224f6232b07dbf20660538b
SHA15ffff836ca50bbf7db9c10d8ada0ae1937ea2757
SHA256fedd3c1372a1650ae3181e29c01af9e8499da4b1a1d2185181e10a02e376c67e
SHA51279583e81a7a0210778c2c5d6cc5b38f1ba758108706afeade7a38013cd817094fbde8bc2b429c23184fa8f893664c0b9b096596b24b44d289ac149792deee363